barscaret-downcaret-leftcaret-rightcaret-upcheckchevron-leftchevron-rightfile-pdfinfosign-in-altsignin text-widthtimesyoutube

iOS > Device Enrollment (Adding Devices)

Adding iOS Devices to Apple Business Manager with Apple Configurator 2

Updated on November 25th, 2021

Automated Device Enrollment (ADE) is a feature in Apple Business/School Manager that lets you automate the initial setup and MDM enrollment of devices that have been assigned to your Apple Business/School Manager account.

The Automated Device Enrollment is not available for devices that are not assigned to your ABM/ASM account. You can, however, assign iPhones and iPads (running iOS 11 or later) to your Apple Business/School Manager account manually using Apple Configurator.

Currently, you cannot assign Macs to ABM/ASM manually, but Apple is planning to release an Apple Configurator for iPhone soon, which is expected to enable this option, too.

30-day grace period

The configurator enrollment has a grace period of 30 days. During this time, the device user will see an option to Leave remote management. Once the grace period has passed, the option disappears from the device's end.

What is needed to add a device to ABM/ASM using Apple Configurator?

  • You need a Mac with Apple Configurator 2.5 or newer and a USB connection to the device
  • Make sure your device runs iOS 11 or later
  • You should have a Device Manager user role in Apple Business/School Manager
  • Good to know: device reset is required

How to add iOS devices to Apple Business Manager with Apple Configurator

It is recommended to reset the device before starting the process. In this way, the probability of errors is smaller. You can reset the device through the device's Settings > General > Reset > Erase all content and settings.

  1. Connect the device to the Mac with a USB cable.
  2. Prepare a Wi-Fi profile, which will be pushed to the device later. Start doing this by choosing File > New Profile. Then select Wi-Fi and configure the settings.wifiprofile.jpg
  3. Right-click on the device on and click Prepare.
    step3.JPG
  4. In the wizard, select Manual configuration and Add to Apple School Manager or Apple Business Manager. Also, uncheck Activate and complete enrollment.
    In Apple Configurator, choose Manual Configuration and "Add to Apple School Manager or Apple Business Manager".
  5. When asked to choose an MDM server, define one by giving the name Miradore and using the URL https://gateway.miradore.com. After hitting next, you'll see the certificates fetched from that site. Continue by hitting Next again.
  6. Next, you're asked to sign in to the Device Enrollment Program with an Apple ID that has access to the Apple portal.
  7. Choose to generate a new supervision identity.
    Step8.JPG
  8. Make sure to select Show all steps in the Configure iOS Setup Assistant screen.
    The device enrollment may fail due to an invalid profile if you configure the setup assistant to not show some of the steps.ConfigureiOSSetupAssistant.png
  9. Choose the Wi-Fi profile that you created before in the second step, and click Prepare. Before doing that, however, make sure that you don't have any Apple ID defined in the device, because if there is, the preparation will fail, and the device gets locked down.
    step9.JPG
  10. The iPad preparation takes a few minutes after which the device should appear in the Apple Business Manager, so wait until the iPad preparation is complete. After this step, you can put the device aside for a moment. You'll need to handle it again on step 17.
  11. Once ready, navigate to https://business.apple.com/ and sign in.
  12. In the portal, go to the Settings > MDM servers. There, you should see your MDM servers and the device that you just added. All devices added manually with Apple Configurator will automatically appear under MDM server Apple Configurator 2. Click the Show devices button.
    Devices that have been added to Apple Business Manager via Apple Configurator 2.
  13. Select device(s) from the list (keep the Ctrl-key pressed if you want to select many) and use the Edit Device Management button on the right to assign the selected devices to the desired MDM server.
    How to edit device management settings in Apple Business Manager in order to assign devices to an MDM server.
  14. Next, log in to your Miradore site at: https://login.online.miradore.com/Login and go to the Enrollment > Apple DEP view. Click the Update button and choose whether you want to update all devices or just the new and changes ones. After that, you should be able to see your devices on the page.Update button syncs devices from Apple Business or School Manager to your Miradore site.
  15. Select the new devices from the view and assign an enrollment profile to the devices by choosing Actions > Assign enrollment profile. When doing this, you can add tags for the device if you want to. Miradore adds the "Dep" tag automatically for the devices that go through the Automated Device Enrollment.Assign an enrollment profile
  16. If you want, you can check the enrollment profile settings by using the Enrollment profile settings in the Actions menu. There, you can choose preferred device configurations for the automated device enrollment. For example, you can enable Supervised mode and deny the MDM profile removal.
    Enrollment profile settings
  17. Next, you can start up the device setup wizard on your iOS device from the Hello screen. Enter the requested settings like language, region, and Wifi settings. The device connects to Apple services and you will soon see the Remote Management screen on the device. Click Next from the top-right corner and follow instructions to complete the device setup. In this phase, the device enrolls in Miradore which then installs the device automatically as administrators have configured at their Miradore site.RemoteManagement.jpg

Soon, you will see the home screen and you can start to use the device. Of course, it still may take some minutes before the device finishes up all the assigned installations. In Miradore, you should be able to see the device in the Devices view. One thing that you still might need to do, is to assign a user for the device on the Device page.

Devices.JPG

  • This field is for validation purposes and should be left unchanged.

Previous Article:
«

Next Article:
»